Privacy Policy

1. Controller

The controller of your personal data is Ing. Jakub Sankot, Company ID (IČO) 24112348, U Polí 3303, 276 01 Mělník, Czech Republic, email j.sankot@gmail.com. Send questions and requests to this email.

2. What data I process

Account: the email you sign in with, your password (stored only as a secure hash, never in readable form) and technical sign-in records.

Your business details: name, address, company ID (IČO), VAT ID (DIČ), bank account and contacts you fill in under Settings.

Invoices and clients: the content of your invoices and the details of your customers that you enter into the app.

Optionally, for tax help: type of business (flat-rate expense percentage), number of children you claim a tax credit for, the date you started your business and whether you were self-employed before.

Optionally, when importing old invoices: the documents you upload (PDF, photos, Word, Excel). They are used only to read the data and are not stored in the app; only the invoices you confirm are saved.

The PIN for the app lock is stored only as a secure hash, never in readable form.

Pro subscription: from Apple I receive only purchase information (product, purchase date and end of period, transaction and company identifier). I never see your name, payment card or Apple ID.

iPhone app: Face ID or Touch ID is checked by the iPhone itself and the app only learns whether it succeeded; it never receives your fingerprint or face data. Notifications (e.g. about an overdue invoice) are scheduled on the phone itself, without any server or advertising identifier. Your sign-in is stored on the phone as a random token.

3. Why and on what legal basis

I process your account, business details and invoices to provide the app to you (performance of a contract, Art. 6(1)(b) GDPR).

I process data for tax help only with your consent (Art. 6(1)(a) GDPR). You withdraw consent by turning tax help off in Settings, which deletes the data.

Technical records and app error reports are used to keep the service secure and fix it (legitimate interest, Art. 6(1)(f) GDPR).

I track aggregated usage (number of invoices issued, date of the last invoice and last sign-in) to understand how the app is used and to improve it (legitimate interest, Art. 6(1)(f) GDPR). I don't look at invoice content for this.

I don't use the data for advertising or profiling and I don't sell it.

4. Your customers' data

You are the controller of your clients' data. The operator processes it for you only as a processor: it stores the data so invoices can be issued, doesn't use it for other purposes, keeps it confidential, protects it and deletes it when you stop using the app.

5. Who has access to the data

The app runs on Cloudflare infrastructure (hosting and a database stored in the EU). Cloudflare is a processor bound by a data processing agreement and EU standard contractual clauses.

When you look up a business by company ID, the query is sent to the public ARES registry. Emails with invoices are sent from your own mailbox. Invitations, password links and app notifications (e.g. about an issued recurring invoice) are sent from the operator's Gmail mailbox (Google), which is a processor. Your company's data backup, if you turn it on (Settings → Data backup), is sent from the same mailbox, only to the address you choose.

If you use the import of old invoices, the uploaded documents are sent to the Claude service of Anthropic, PBC (USA) to read the data. Anthropic is a processor bound by a data processing agreement; under its commercial terms it doesn't use API data to train models. Transfers to the USA rely on EU standard contractual clauses. Without importing, nothing is sent to Anthropic.

If the iPhone app crashes or hits an error, it sends a technical error report (app and system version, device type, where in the code the error happened) to the Sentry service of Functional Software, Inc., with data stored in the EU (Frankfurt). The report contains no email, name or invoice content and is not used for tracking. Sentry is a processor bound by a data processing agreement. The web app sends nothing like this.

The Pro subscription in the iPhone app is sold, and payments are processed, by Apple Distribution International Ltd. (Ireland) as an independent controller under its own privacy policy.

Other people have access only if you invite them to your company.

6. How long

For as long as you use the app. After you stop, I delete your data within 30 days. Tax help data is deleted as soon as you turn the feature off. Records of subscription purchases may be kept for as long as accounting and tax rules require.

7. Your rights

You have the right to access your data, have it corrected or erased, restrict processing, data portability and the right to object. You can withdraw consent at any time.

You can also lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.gov.cz).

8. Security

The connection is encrypted, you can only get into the app after signing in and each company's data is kept separate. Only the operator has access, to the extent needed to run the service.